Privacy Policy

Last updated: 2026-07-21

This Privacy Policy explains what information Write On! (the "Service"), provided by Agensii Intelligence, collects, why, and what control you have over it. We've tried to write it in plain language rather than dense legalese.

1. Local-first, by design

The Service is local-first: when you draw annotations on a video, they're saved in your browser's local storage (IndexedDB) on your device. If you never create an account or never turn on cloud sync, your annotations never reach our servers at all — we simply don't have them. Local video files you select for playback also never leave your device.

Cloud sync is optional and only available to signed-in accounts that have turned it on. When sync is enabled, your annotations are sent to and stored on our servers so they're available across your devices and backed up.

2. What we collect

We collect the following categories of information:

  • Account information: the email address you sign up with (or that Google provides via sign-in), and a hashed password if you use email/password sign-in. We never store your password in plain text.
  • Content, if sync is on: your projects, video references (the URL or ID and title of videos you've added — we don't host the video itself), and your synced annotations.
  • AI conversation history (future feature) — only if and when we introduce an AI assistant, and only after you separately consent to it. This will be a distinct, opt-in consent gate, not bundled with account creation.
  • Technical logs: standard server logs (IP address, timestamps, request paths, user agent) generated by normal operation of a web server, used for security, debugging, and abuse prevention. We don't use these logs for analytics or advertising.

We do not track your viewing history by default. We don't record which videos you watch, when, or for how long, unless you explicitly opt in to a "resume where you left off" feature that stores your last watch position for a video — that setting is off unless you turn it on.

3. Why we process your data (legal bases)

Where the GDPR or a similar law applies, we rely on the following legal bases:

  • Contract necessity — account information and synced content, to provide the Service you've asked for (for example, syncing annotations across your devices).
  • Consent — cloud sync itself, watch-position storage, and (in the future) AI features are all opt-in and processed on the basis of your explicit consent, which you can withdraw at any time in account settings.
  • Legitimate interests — technical logs and security monitoring, to keep the Service reliable and secure, balanced against your privacy interests.

4. Signing in with Google

If you choose to sign in with Google, Google shares your name, email address, and profile avatar with us so we can create or match your account. We don't request access to your other Google data (Drive, Contacts, etc.). Google's own handling of your data is governed by the Google Privacy Policy .

5. YouTube embeds

When you add a YouTube video to a project, we embed YouTube's standard player. That embedded player is served directly from YouTube/Google, and loading it may set cookies or collect data in accordance with Google's Privacy Policy — we don't control that and it isn't covered by this policy. We do make one server-side request to YouTube (oEmbed) to fetch a video's title and thumbnail for display in your project; that metadata is cached and is automatically refreshed or purged within 30 days.

6. We don't sell your data

We do not sell, rent, or trade your personal information to third parties. We don't run advertising, and we don't share your data with data brokers or advertising networks. We only share information with the limited service providers (such as our hosting infrastructure) needed to operate the Service, under contracts that restrict them to that purpose.

7. How long we keep your data

  • Video metadata fetched from YouTube (title, thumbnail) is refreshed or purged within 30 days.
  • If you delete your account, we start a 7-day grace period during which the deletion can be reversed if it was a mistake. After 7 days, your account and associated server-side data are permanently and irreversibly deleted.
  • Local annotations stored only in your browser are under your control at all times — clearing your browser storage or using your device's data controls removes them immediately.

8. Your rights

You can access, export, and delete your data directly from the product:

  • Access: your account settings show what data we hold for your account.
  • Export: the Service has built-in export of your annotations and projects (including to open formats like Excalidraw and Markdown), so you can take your data with you at any time.
  • Delete: you can delete individual annotations, projects, or your entire account at any time, subject to the 7-day grace period above.

Depending on where you live, you may have additional rights under laws like the GDPR or U.S. state privacy laws (for example, to correct inaccurate data, restrict or object to certain processing, or lodge a complaint with a supervisory authority). To exercise any of these rights, contact us using the details below.

9. International data transfers

Our servers are located in the United States (Google Cloud, us-central1 — Iowa). If you access the Service from another country, your information may be transferred to and processed in a country with different data protection laws than your own. Safeguards for such transfers will be confirmed as part of the pending legal review noted at the top of this page.

10. Children's privacy

The Service is intended for a general audience and is not directed at children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided us with personal information, contact us and we'll delete it.

11. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we'll notify you (for example, by email or an in-app notice) before they take effect.

12. Contact

Questions about this policy, or want to exercise a privacy right? Contact us at ai@agensii.com.